SC-300 Azure AD Conditional Access 3

Question 1

Which Conditional Access policy template is designed to protect administrator accounts by requiring MFA for all administrative roles?

Accepted Answer

Require MFA for admins

Answer

The 'Require MFA for admins' template targets users assigned to privileged directory roles and enforces multi-factor authentication for their sign-ins.

Question 2

Which Conditional Access control can restrict what users can do within a cloud application session without blocking access entirely?

Accepted Answer

Session control: Use Conditional Access App Control

Answer

Conditional Access App Control routes sessions through Microsoft Defender for Cloud Apps to apply granular session policies such as blocking downloads or copy-paste.

Question 3

An administrator needs users on unmanaged devices to only view (not download) files in SharePoint Online. Which Conditional Access session control achieves this?

Accepted Answer

Use Conditional Access App Control

Answer

Conditional Access App Control, combined with a Defender for Cloud Apps session policy, can restrict download actions for sessions originating from unmanaged devices.

Question 4

What happens when a Conditional Access policy has conflicting grant controls where both 'Require MFA' and 'Require compliant device' are selected and 'Require one of the selected controls' is chosen?

Accepted Answer

Access is granted if the user satisfies at least one of the controls

Answer

When 'Require one of the selected controls' is configured, access is granted as soon as the user satisfies any one of the listed grant controls.

Question 5

Which tool in the Azure portal lets administrators test whether a specific user would be affected by a Conditional Access policy without the user signing in?

Accepted Answer

What If tool

Answer

The 'What If' tool in the Conditional Access blade simulates which policies would apply to a user under specified conditions without requiring an actual sign-in.

SC-300 - Microsoft Identity and Access Administrator Practice Test

SC-300 - Microsoft Identity and Access Administrator Practice Test

SC-300 Azure AD Conditional Access 3